CVEvulnerability
CVE-2020-0382
2.3 LOW
Official page ↗
- Status
- Modified
- Published
- 2020-09-17
- Last modified
- 2026-06-17
- Assigner
- [email protected]
- CVSS 3.1 ([email protected])
- 2.3 LOW — CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:L/I:N/A:N
- CVSS 2.0 ([email protected])
- 2.1 LOW — AV:L/AC:L/Au:N/C:P/I:N/A:N
- Weaknesses
- CWE-755
Description
In RunInternal of dumpstate.cpp, there is a possible user consent bypass due to an uncaught exception. This could lead to local information disclosure of bug report data with System execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-11 Android-10Android ID: A-152944488
Affected configurations
• google android 10.0
• google android 11.0
Related
Weakness · CWE (1)
- CWE-755 Improper Handling of Exceptional Conditions weakness
References
- https://source.android.com/security/bulletin/2020-09-01 Vendor Advisory
- https://source.android.com/security/bulletin/2020-09-01 Vendor Advisory